Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/riD84npooDzOqhlvH7nf9Aj294A.roa
File: riD84npooDzOqhlvH7nf9Aj294A.roa (raw, json)
Hash identifier: O+rbEotKGudbvk9Gq/WMzzdZufBN90ky0PyB//XXeaE=
Subject key identifier: AE:20:FC:E2:7A:68:A0:3C:CE:AA:19:6F:1F:B9:DF:F4:08:F6:F7:80
Certificate issuer: /CN=907a5c4ea453b46c81cb136d92b9309b146c3e45
Certificate serial: 019B797E940E1825D205224BA97324927551
Authority key identifier: 90:7A:5C:4E:A4:53:B4:6C:81:CB:13:6D:92:B9:30:9B:14:6C:3E:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kHpcTqRTtGyByxNtkrkwmxRsPkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/riD84npooDzOqhlvH7nf9Aj294A.roa
Signing time: Thu 01 Jan 2026 12:18:17 +0000
ROA not before: Thu 01 Jan 2026 12:18:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210521
IP address blocks: 62.204.46.0/24 maxlen: 24
2a12:a200::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kHpcTqRTtGyByxNtkrkwmxRsPkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:94:0e:18:25:d2:05:22:4b:a9:73:24:92:75:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=907a5c4ea453b46c81cb136d92b9309b146c3e45
Validity
Not Before: Jan 1 12:18:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae20fce27a68a03cceaa196f1fb9dff408f6f780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c1:e0:13:01:07:89:e8:47:19:3f:54:24:1c:
69:6d:9c:5a:13:29:88:16:4c:ce:1e:2e:62:04:3a:
60:a7:4a:ec:72:7f:f5:41:f9:96:58:c3:cd:3f:4b:
1a:ac:65:d7:fe:0d:60:2a:ec:ef:ca:5d:37:0d:f6:
db:84:bc:b7:1e:de:9d:24:43:68:16:cc:a5:05:aa:
e2:65:1e:ac:80:dd:d4:62:c8:ac:83:aa:0a:27:43:
b0:b1:dc:52:3f:de:3c:84:a6:cf:7c:df:c3:9e:43:
de:e1:4c:3a:fe:dd:ea:ca:ac:83:19:c2:ce:da:c0:
a6:6f:28:e2:53:b0:45:10:41:41:0e:8b:70:db:d6:
ca:52:8c:5a:7f:f5:d8:51:f3:6f:5a:db:f4:d0:62:
62:21:14:0d:05:fe:11:9d:db:e8:af:88:c8:61:1a:
f8:e0:ef:85:69:b4:51:55:04:59:95:20:cd:2a:63:
76:4b:f6:ab:fe:80:82:6e:9e:d1:17:30:02:07:e9:
e7:a8:bc:7c:00:57:45:f1:3b:76:3c:7c:2d:c1:45:
53:9e:fe:aa:f6:fd:b1:7c:32:a1:18:df:14:51:d9:
f2:ed:88:9f:df:78:c3:82:9f:7d:68:05:cf:d7:af:
a6:27:d3:2d:6a:bd:d8:81:b1:a8:57:09:56:23:09:
15:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:20:FC:E2:7A:68:A0:3C:CE:AA:19:6F:1F:B9:DF:F4:08:F6:F7:80
X509v3 Authority Key Identifier:
keyid:90:7A:5C:4E:A4:53:B4:6C:81:CB:13:6D:92:B9:30:9B:14:6C:3E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kHpcTqRTtGyByxNtkrkwmxRsPkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/riD84npooDzOqhlvH7nf9Aj294A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.46.0/24
IPv6:
2a12:a200::/29
Signature Algorithm: sha256WithRSAEncryption
a7:f8:1b:88:42:a6:24:ee:12:00:58:f5:4d:f7:92:de:a4:60:
ed:28:5c:1b:9d:1d:88:1e:09:3c:05:f3:13:58:69:95:de:e7:
db:db:d7:c5:f5:2c:86:84:16:d5:96:d2:22:38:b5:97:69:fd:
3a:e5:21:e4:56:d3:76:1e:d3:83:64:14:1d:36:94:02:31:a7:
4a:27:e7:f2:cf:72:32:9d:b0:27:a2:23:2e:ad:8d:9a:3a:a8:
c4:90:22:88:fd:e3:f3:59:60:b1:0f:b5:48:ef:d0:05:49:37:
12:80:e3:7a:05:5f:85:68:d1:b8:80:75:6f:99:d2:db:e9:4c:
5d:13:22:96:a0:54:b1:6e:1c:9d:45:3b:0f:8d:48:e1:62:6c:
87:a5:e6:ff:c9:73:02:dc:f2:c6:d7:66:52:a5:20:5a:cd:4e:
71:a6:2a:fe:fd:8f:f4:13:62:80:3e:07:5b:d5:64:c6:e1:42:
4f:e0:f3:61:de:ad:1d:76:e0:34:4d:67:19:57:c0:57:40:92:
27:7a:fe:b4:70:a8:32:56:92:a2:ce:49:dc:23:51:fa:d7:a6:
bc:2d:1b:2e:b9:2a:9c:66:c2:ea:44:73:3d:08:c8:7b:d3:f7:
19:42:ff:7c:af:1e:61:1b:5b:9f:2c:01:8a:45:3e:c3:1e:84:
be:34:e4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:20:45 2026 by rpki-client